152 matches found
CVE-2025-12608: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in itsourcecode Online Loan Management System 1.0. The affected element is an unknown function of the file /manageuser.php. Performing manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has...
EUVD-2020-21663
Malware in sbrugna...
EUVD-2023-23994
Malicious code in bioql PyPI...
EUVD-2022-44729
Malicious code in bioql PyPI...
EUVD-2024-47199
Malicious code in bioql PyPI...
EUVD-2024-46588
Malicious code in bioql PyPI...
EUVD-2023-59099
Malicious code in bioql PyPI...
EUVD-2022-49735
Malicious code in bioql PyPI...
CVE-2025-10785
A vulnerability was detected in Campcodes Grocery Sales and Inventory System 1.0. This affects an unknown part of the file /manageuser.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used...
CVE-2025-10785
A vulnerability was detected in Campcodes Grocery Sales and Inventory System 1.0. This affects an unknown part of the file /manageuser.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used...
CVE-2025-10785: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in Campcodes Grocery Sales and Inventory System 1.0. This affects an unknown part of the file /manageuser.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used...
CVE-2025-8230 Campcodes Courier Management System manage_user.php sql injection
A vulnerability classified as critical was found in Campcodes Courier Management System 1.0. This vulnerability affects unknown code of the file /manageuser.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...
CVE-2025-8230 Campcodes Courier Management System manage_user.php sql injection
A vulnerability classified as critical was found in Campcodes Courier Management System 1.0. This vulnerability affects unknown code of the file /manageuser.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...
CVE-2025-8230: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in Campcodes Courier Management System 1.0. This vulnerability affects unknown code of the file /manageuser.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...
CVE-2025-40728: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Customer Support System v1.0. This vulnerability allows an authenticated attacker to retrieve, create, update and delete databases via the id parameter in the /customersupport/manageuser.php endpoint...
CVE-2024-3042
A vulnerability was found in SourceCodester Simple Subscription Website 1.0 and classified as critical. This issue affects some unknown processing of the file manageuser.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2024-5981
A vulnerability was found in itsourcecode Online House Rental System 1.0. It has been classified as critical. Affected is an unknown function of the file manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
CVE-2023-1785
A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0. It has been classified as critical. Affected is an unknown function of the file manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifie...
CVE-2020-29288
An SQL injection vulnerability was discovered in Gym Management System In manageuser.php file, GET parameter 'id' is vulnerable...
CVE-2025-2869: Improper Neutralization of Input During Web Page Generation
Reflected Cross-Site Scripting XSS vulnerability in version 1.0 of the Clinic Queuing System. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the id parameter in /manageuser.php...